Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          MiN2fxzQXd2qb0iPxXLcZl16x/9eImCgAj4QbPRPx2c=
Subject key identifier:   8F:C5:8A:E0:69:CA:9E:66:28:DF:E4:C6:81:59:CE:A0:E1:89:DF:31
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       2FEB01E4E9943D68F46D171A520BDE305D9B4A33
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 05 Mar 2024 18:22:42 +0000
ROA not before:           Tue 05 Mar 2024 18:17:42 +0000
ROA not after:            Tue 04 Mar 2025 18:22:42 +0000
asID:                     264780
IP address blocks:        179.61.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:01:e4:e9:94:3d:68:f4:6d:17:1a:52:0b:de:30:5d:9b:4a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Mar  5 18:17:42 2024 GMT
            Not After : Mar  4 18:22:42 2025 GMT
        Subject: CN=8FC58AE069CA9E6628DFE4C68159CEA0E189DF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:55:a4:80:78:f0:75:4e:15:61:c6:4b:0f:
                    0d:18:5b:36:67:1c:7a:90:57:24:b2:2b:b9:fb:42:
                    b2:63:05:8d:d8:a2:19:6a:ac:8d:31:40:65:87:94:
                    be:23:6d:47:f6:55:26:ee:0d:1f:bb:7f:06:1f:5a:
                    a8:61:d2:bb:7f:8c:7d:97:35:6f:7b:21:02:5e:e9:
                    eb:f5:92:0f:72:b0:56:6e:83:df:5d:33:0b:0b:20:
                    e0:f8:65:bb:8c:06:e8:bb:a8:ef:c7:cd:1e:14:77:
                    c6:26:fd:c9:0b:3e:0d:b4:6b:3e:28:90:b5:7d:41:
                    c5:b6:14:6b:14:64:ea:49:40:f8:1a:86:f4:66:88:
                    d0:32:8a:36:a7:ec:fb:25:c6:f7:8b:1f:90:b3:16:
                    8c:cd:b9:66:82:f3:88:fc:df:42:8f:9c:c5:25:d3:
                    b4:30:c6:3f:9b:6c:e1:80:49:dd:d1:13:63:84:cd:
                    03:42:66:be:dd:61:1d:aa:a3:33:36:3c:6c:b5:fa:
                    8c:80:1d:f8:30:be:d3:59:4a:03:08:2b:d2:6a:ac:
                    47:a3:62:3b:aa:b6:7f:ff:fa:06:da:1d:da:e3:00:
                    ea:99:e4:17:ed:ea:93:51:e3:ab:2b:53:7f:0b:a6:
                    e7:fa:65:ee:b6:12:92:a4:04:f3:ce:30:47:0d:9a:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:8A:E0:69:CA:9E:66:28:DF:E4:C6:81:59:CE:A0:E1:89:DF:31
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131312e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:b6:e2:39:3a:23:a5:5b:5b:3a:38:c4:6e:e3:6d:7c:24:
         cb:c3:8c:10:a6:33:50:10:a0:41:cc:81:fd:e7:82:3b:17:64:
         5b:9f:8a:1d:fa:e7:cb:44:57:61:c4:78:f7:67:22:a0:19:70:
         d1:ff:86:b4:fa:53:a9:a7:f8:fe:72:27:5e:64:9a:bc:80:7e:
         c3:42:02:41:73:d6:09:2b:11:fb:e3:27:b5:54:24:6d:94:e6:
         dc:f3:d9:90:e6:fc:e3:d6:05:fb:c1:83:ad:0f:fa:0e:b0:e0:
         eb:00:eb:17:c4:70:3c:70:8e:62:60:83:7f:45:cc:c4:c2:a6:
         d0:a5:49:d9:cb:95:72:7a:6e:9c:03:89:1d:04:60:ed:9f:87:
         4f:7e:71:06:00:7a:63:53:c6:04:62:5b:19:71:04:58:78:8e:
         4f:29:5f:2d:f6:a6:f5:f9:51:95:cd:c4:60:2d:93:39:6e:39:
         0d:d4:56:57:75:38:c0:64:fd:8b:19:50:0c:39:9c:79:ec:88:
         98:fb:8a:65:58:4c:27:82:3e:be:df:23:75:6d:61:00:07:ff:
         90:56:3d:48:7f:b4:bc:f2:23:7e:5c:5d:03:f8:a3:2a:b2:f8:
         e2:a3:59:13:af:c1:8b:df:c9:a7:e4:96:09:3f:ae:4e:be:ee:
         29:a0:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:57 2024 by rpki-client on console-ams.rpki-client.org